TPRM/IT Risk Consultant

About the role

The Business Analyst supports integration efforts and is responsible for defining business requirements, including process flows, use cases, and test plans. They work closely with various teams and serve as a liaison between client subject matter experts and the development team.

Responsibilities

• Own the vendor security review process by assessing third-party vendors to ensure compliance with firm standards.
• Support the completion of external security questionnaires by articulating the security posture to institutional clients and regulators.
• Affiliate with internal SOX IT controls audits and access control reviews across the technology stack, including proprietary systems and third-party SaaS platforms.
• Affiliate with maintaining and testing the Business Continuity and Disaster Recovery (BCDR) plans, including documentation updates and tabletop exercises.
• Affiliate with drafting and maintaining information security policies and procedures.
• Perform risk assessments and gap analyses for IT systems that handle sensitive data.
• Oversee business-to-system knowledge management and assist in overall system design from user interface through backend processes.

Requirements

• Experience in Third-Party Risk Management (TPRM).
• Experience with client and regulatory due diligence processes.
• Knowledge of IT Controls and Audit, including SOX IT controls.
• Familiarity with Business Continuity and Disaster Recovery (BCDR) planning and testing.

Preferred Qualifications

• Experience in policy development, including drafting and maintaining information security policies and procedures.
• Ability to perform risk assessments and gap analyses for IT systems handling PHI and financial data.

Benefits

Everforth Apex offers a comprehensive benefits package including medical, dental, vision, life, disability, and other insurance plans. Additionally, we provide an ESPP (employee stock purchase program), a 401K program, a Health Savings Account (HSA) on the HDHP plan, a SupportLinc Employee Assistance Program (EAP) with up to 8 free counseling sessions, a corporate discount savings program, and other discounts. Professional development includes an on-demand training program, access to certification prep and a library of technical and leadership courses/books/seminars, and certification discounts and other perks to associations such as CompTIA and IIBA. For additional information, refer to the 'Welcome Packet' provided by an Everforth Apex team member.

Pay

Details about pay are not specified in the job posting.

Schedule

Details about the schedule are not specified in the job posting.

Contact Information

To request an accommodation under the Americans with Disabilities Act to participate in an interview with a virtual recruiter or to use our website for a search or application, please contact our Benefits Department at [email protected] or 804-523-8228. Please note that this contact information is strictly for medical ADA accommodations and will not answer other inquiries.